Application Security News and Articles


Breaking Down The Blue Yonder Cyberattack

In a recent podcast interview with Cybercrime Magazine's host, Charlie Osborne, Scott Schober, Cyber Expert, Author of "Hacked Again," and CEO of Berkeley Varitronics Systems, discusses the recent cyberattack on Blue Yonder, including how the ...

8-K cybersecurity-incident disclosures to the SEC: A 2024 timeline

It’s been more than a year since the U.S. Securities and Exchange Commission adopted new rules to enhance the annual reporting of cybersecurity measures practiced by SEC registrants. These requirements are in addition to those about the timely ...

Best of 2024: Cisco Vulnerability: CISA Alerts Of Smart Install Exploits

In light of recent cybercrime incidents, the United States (US) Cybersecurity and Infrastructure Security Agency (CISA) has issued an alert pertaining to a Cisco vulnerability. As per recent reports, the Cisco vulnerability prevails within the ...

How Breach Readiness Will Shape Cyber Defense in 2025

Let me start by wishing everyone Happy Holidays and a great new 2025 ahead. As we exit 2024, I am equally hopeful and worried about the year ahead. While I am concerned that even increased spending on cybersecurity has not slowed down ...

New Year, Same Silent Threats: How Zero-Days Evade Detection

The post New Year, Same Silent Threats: How Zero-Days Evade Detection appeared first on Votiro. The post New Year, Same Silent Threats: How Zero-Days Evade Detection appeared first on Security Boulevard.

Tools for the Fastest Java Migrations

The fastest Java migrations from Oracle to an alternative provider start with careful planning and a complete JDK usage inventory. The post Tools for the Fastest Java Migrations appeared first on Azul | Better Java Performance, Superior Java ...

When risky cybersecurity behavior becomes a habit among employees

While the majority of employees avoid risky behaviors, a small subset makes them a habit, posing a significant cybersecurity challenge, according to Mimecast. 48% of employees engaged in behaviors that exposed their organizations to cyber risk, ...

Kata Containers: Open-source container runtime, building lightweight VMs

Kata Containers is an open-source project dedicated to creating a secure container runtime that combines the performance and simplicity of containers with the enhanced isolation of lightweight virtual machines. By leveraging hardware ...

CISOs don’t invest enough in code security

72% of security leaders agree that the age of AI necessitates a complete reset of how organizations approach application security, according to Cycode. This urgency is reinforced by the fact that 93 billion lines of code were generated in the ...

The real cost of data breaches for businesses

This article presents key findings from 2024 reports on data breaches. Breaches are taking longer to resolve and are becoming more costly for organizations. With recovery times extending and costs increasing, businesses face growing challenges in ...

Trustworthy Cloud Platforms: Ensuring Secure Access

Is Your Organization’s Trust in Cloud Technology Well-Placed? In this expanding digital landscape where businesses are heavily reliant on cloud technology, can we confidently assert that our data is safe in the cloud? Regardless of the size of ...

Take Control: Empowering Your Team with NHIDR Solutions

Are You Truly Harnessing the Power of NHIDR Solutions? It’s no secret that Non-Human Identities and Data Rights (NHIDR) solutions are crucial for maintaining a robust security system, particularly where cloud environments are involved. But do ...

Feel Reassured with Advanced Identity and Access Management

Why Should We Manage Non-Human Identities and Secrets? Imagine a bustling international airport with countless travelers moving in every direction. Now, consider these travelers as your non-human identities (NHIs), each carrying a unique passport ...

What Are Koobface Botnet Masters Leded (Ded Mazai) and Anton Nikolaevich Korotchenko (Антон Николаевич Коротченко) Koobface Botnet Master KrotReal Up To?

Dear blog readers, In this post I'll post some recent actionable intelligence on the Koobface botnet's master Leded (Ded Mazai) and Anton Nikolaevich Korotchenko (Антон Николаевич Коротченко) Koobface Botnet Master ...

LDAPNightmare: SafeBreach Labs Publishes First Proof-of-Concept Exploit for CVE-2024-49112

SafeBreach researchers developed a zero-click PoC exploit that crashes unpatched Windows Servers using the Windows Lightweight Directory Access Protocol (LDAP) remote code execution vulnerability (CVE-2024-49112). The post LDAPNightmare: ...

Combatting the Security Awareness Training Engagement Gap

Despite years of security awareness training, close to half of businesses say their employees wouldn’t know what to do if they received a phishing email. According to a US government-backed study, one of the main reasons for the lack of impact ...

In Praise of Bureaucracy – A New Era of Cyber Threats

Let’s face it: most of us dislike bureaucracy. The endless forms, the rigid processes, and the perceived complexity. “Why can’t things be simpler?” we often ask, blaming bureaucratic systems for complicating everything. However, ...

Key Cyber Threats to Watch in 2025

As we look ahead to 2025, various predictions about the future of cyber threats have been circulating. To bring clarity, we leveraged Google’s notebookLLM to summarize key insights from multiple sources about what organizations should prepare ...

Happy New Year 2025

The post Happy New Year 2025 appeared first on Security Boulevard.

Gain Control with Advanced Secrets Vaulting

Can Advanced Secrets Vaulting Empower Your Security? The increasing digitization has led to the rise of a diverse range of cyber threats, demanding more robust security strategies. One of these comprehensive approaches includes the concept of ...